Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File:                     ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier:          VNTd0Bdf7jNl5JbKTe8oICPMlGOpMpOMdh/1ZTHUH0U=
Subject key identifier:   D5:31:2D:5C:0A:E9:6F:EE:8A:FD:66:E0:66:FE:87:E2:16:1D:AE:F3
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer:       /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial:       01901F347780B108A199AA8DC46A6B22487B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number:          067C
Signing time:             Sun 16 Jun 2024 04:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:50 +0000
Files and hashes:         1: N9K3ll1cNYN6skmHp1uOBrFXWeA.roa (hash: N2TBwIR17BC95qFs7hLGQESmu3Kk0H9CToTU7fIqffs=)
                          2: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: iKe1Oav8pF3Kfkun5p6icbld2ThDYfFj9FNe6zzgUsI=)
                          3: hqDaycVO1KxCqfZgxZlv_Lvkh98.roa (hash: f9NoQhJhXm+/4yTyYczcXpZR0IUb2pGopLnprZDJLe8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:77:80:b1:08:a1:99:aa:8d:c4:6a:6b:22:48:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
        Validity
            Not Before: Jun 16 04:00:50 2024 GMT
            Not After : Jun 17 04:00:50 2024 GMT
        Subject: CN=d5312d5c0ae96fee8afd66e066fe87e2161daef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:c3:af:f4:47:47:d4:08:34:ba:17:8f:86:
                    af:49:04:d5:e0:b7:cd:7c:cd:99:fa:a8:ef:d4:25:
                    12:40:d0:24:2a:31:71:20:5b:3a:9b:0e:86:3f:2d:
                    8d:33:45:90:aa:68:1d:a3:db:4c:82:4c:65:07:69:
                    06:78:5b:68:5c:30:8c:9f:5c:e2:23:fe:61:e9:b3:
                    ee:44:7c:a7:23:29:bf:c7:0d:8a:9f:11:91:6e:de:
                    27:8a:38:b0:50:8f:8d:7b:dd:41:3a:00:31:67:6a:
                    9c:0c:ad:e7:0d:88:62:f1:df:d9:56:32:dd:eb:ad:
                    69:29:02:76:84:65:dd:55:6b:4e:54:d1:f6:89:d0:
                    6d:3c:ed:d2:dd:4c:a8:52:65:d9:8a:91:2f:9c:ff:
                    b6:4c:e6:62:65:78:15:f1:8f:92:fa:d3:0c:16:ad:
                    79:a7:19:0d:03:65:7f:95:ca:07:e5:aa:87:f0:34:
                    27:92:28:a3:70:a8:8c:5d:f3:78:25:29:3c:f1:25:
                    86:3c:b1:33:7b:61:05:a8:d0:7b:63:55:a4:05:7a:
                    ac:91:d3:eb:3a:54:81:71:57:3d:b0:97:49:92:61:
                    f4:5a:1f:1d:03:0b:0a:e4:74:38:6d:aa:4b:8d:65:
                    0e:e8:b3:47:42:94:b9:d7:b9:4c:ed:20:c7:03:23:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:31:2D:5C:0A:E9:6F:EE:8A:FD:66:E0:66:FE:87:E2:16:1D:AE:F3
            X509v3 Authority Key Identifier:
                keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:72:92:90:7d:5d:0b:9b:c9:b9:95:8c:75:33:98:43:39:5f:
         ae:91:69:ae:9a:11:d1:85:aa:44:fb:1d:a0:5c:db:88:0b:c7:
         d5:69:43:04:b0:aa:39:72:73:ef:42:82:5a:4e:fd:36:5a:72:
         38:d6:15:9f:63:30:e9:6f:bb:a8:3e:15:16:1e:3d:c0:b6:4d:
         c3:f6:6d:aa:1b:52:4d:8d:a3:36:23:99:ec:4e:c3:d3:d7:1b:
         50:b3:24:49:fd:e7:97:7d:6a:ab:b9:2b:11:fa:cf:24:8c:cc:
         99:20:14:a9:ba:50:31:55:b1:56:8e:64:ad:bb:4e:3c:7c:20:
         1b:0d:3a:6c:2b:c4:7e:95:b8:76:03:dd:f5:22:45:9e:c4:9f:
         8a:b5:ce:ea:1a:6f:a2:df:bd:51:ed:1b:7b:b0:9f:83:93:01:
         27:b1:46:19:10:e3:9f:8a:8f:a6:2a:b7:c1:0d:7c:d0:df:d7:
         3d:cf:f7:1e:46:f2:31:cd:f6:b3:d4:f7:81:4c:59:d1:fa:27:
         17:e4:1d:29:5c:17:10:81:e5:30:d5:ab:fb:ab:50:a5:f1:61:
         3c:af:99:7f:6b:c9:0b:d6:72:5a:d1:44:68:34:df:18:09:6d:
         71:4a:50:7a:72:68:73:ff:75:1e:40:e9:96:61:62:c6:b4:2d:
         0e:11:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:38 2024 by rpki-client on console-ams.rpki-client.org